#patch-tuesday
52 stories taggedpatch-tuesday.

Microsoft's AI bug-hunters logged 140 Windows CVEs in four months. The queue is now the problem.
FORGE Lab's agentic scanner is finding flaws faster than humans can validate and patch them, and the open-source world is feeling it too.

Windows 11 domain logins broke this week. Here is what actually happened.
A September 2026 security update quietly started enforcing an identity-protection feature. On the wrong kind of network, it locks staff out.

Microsoft's September 2026 Windows 11 update fixes 1,000 flaws and finally lets you move the taskbar
KB5124008 and KB5122880 ship a massive security backlog alongside a taskbar you can drag to any screen edge.

Microsoft ships final Windows 10 security rollup KB5122878 to ESU customers
The September 2026 update lands alongside a record Patch Tuesday fixing 966 flaws, and reaches only machines enrolled in Extended Security Updates or running the Enterprise LTSC editions.

Microsoft's Biggest-Ever Security Update Fixes 974 Flaws, Two Already Used in Attacks
A record-breaking September patch release plugs two security holes that criminals were actively exploiting, plus 20 vulnerabilities serious enough that a single infected machine could spread the attack to others automatically.

Nearly 1,000 Windows Fixes in One Month: Two Zero-Days Already Being Exploited
Microsoft's September 2026 Patch Tuesday lands 964 security fixes, two of them already in active use by criminals, plus roughly 20 bugs that could spread automatically across networks.

Schneider Electric, Siemens, and Aveva patch critical flaws in industrial control systems
September 2026's industrial Patch Tuesday brings fixes for authentication failures, hardcoded encryption keys, and a Linux kernel flaw that lets attackers gain full system control.

Fortinet Fixes Two Critical Security Flaws That Let Attackers Bypass Logins Entirely
One bug hides secret keys inside web code anyone can read. Another turns a Chrome extension into a traffic spy. Neither needed a password.

Google Patches 180 Android Flaws, Including a Wi-Fi Bug That Needs No Tap to Exploit
September 2026's Android security update is the largest in months. One flaw lets attackers run malicious code over Wi-Fi without the phone's owner doing anything.

Microsoft's Latest Excel Security Patch Is Breaking Copy-Paste for Users
The KB5002914 update, released this week, is stopping people from copying cells and dragging formulas. Uninstalling the patch fixes it.

Microsoft's September patches are knocking Remote Desktop offline
Admins across Windows Server and Windows client versions report frozen sessions, hung sign-ins and unresponsive tools after installing this month's updates.

Apple Fixes Around 200 Security Flaws in iOS 27 and macOS Golden Gate 27
The updates patch kernel vulnerabilities that could let attackers take control of a device, crash it, or quietly read private data.

Oracle Fixes More Than 800 Security Flaws in Its Biggest Patch Drop of 2026
Oracle's September 2026 Critical Security Update bundles 673 patches covering over 800 vulnerabilities. More than 240 of those flaws can be exploited remotely by anyone, no password required.

Chrome and Firefox Fix 115 Security Flaws in Back-to-Back Updates
Google and Mozilla have each pushed out new browser versions carrying fixes for dozens of vulnerabilities, three of them rated critical in Chrome. Neither company has seen any of the flaws used in real attacks, but the advice is the same: update now.

Microsoft Teams and new Outlook crash on ARM Windows laptops after August updates
Surface Pro 11 and Surface Laptop 7 owners running Windows 11 24H2 hit launch failures after installing the August 2026 security updates.